CVE-2016-6914

CVE-2016-6914 describes a local privilege escalation vulnerability affecting Ubiquiti UniFi Video installations on Windows prior to version 3.8.0. The flaw stems from weak permissions on the installation directory, allowing a local attacker to replace the taskkill.exe file with a malicious version. Rated with a CVSS score of 7.8 (High), this vulnerability requires local access and low privileges but can lead to complete compromise of confidentiality, integrity, and availability (SYSTEM privileges). The attack complexity is low, as it does not require user interaction. While not listed on the KEV catalog or Hot List, an exploit (EDB-43390) is publicly available on ExploitDB. Despite this, there is no recorded community discussion or media coverage, suggesting limited public attention.